CVE-2026-40782

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile — higher than 15% of all known CVEs

WPAdverts versions <= 2.3.0 have an issue with unauthenticated access that can lead to broken access control.

Organizations may be exposed to unauthorized access to sensitive data, potentially compromising information confidentiality.

It is recommended to update WPAdverts to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.